General
- Target 2026-07-02_2f81aefc355af3dd60273ec32b1c587f_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_nymaim_redline-stealer_rhadamanthys
- Size 3.4MB
- Sample260702-qqvh6act8n
- SHA256 d53fdb31cc1aa93b88663c85fb4628cc6c00bc15387d4f73f8883da7a9a7bcda
- MD5 2f81aefc355af3dd60273ec32b1c587f
- SHA1 ab16aef9bd6bc5e27456fb283f27e12a88455b53
- SHA512 4b9457e39aa0722b997e6627608225809a5c20dc9c3f96fc508e5758d28e5af2fa260f368947cd2f04ff4986179712820f369303c474a7f0b3a2f58be059f6dd
- SSDEEP 49152:GDkpzlg7bV4UxExTTo6TkUEmT5xxvRCI51ie:GDkpzl84UkTcpUjX1ie
- TLSH T1F1F56D13BEC08032EAB70670A87BBB50557A7E209F1365CF7BC47A2E1C716D1A972746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-02_2f81aefc355af3dd60273ec32b1c587f_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_2f81aefc355af3dd60273ec32b1c587f_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_2f81aefc355af3dd60273ec32b1c587f_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_nymaim_redline-stealer_rhadamanthys
- Size 3.4MB
- SHA256 d53fdb31cc1aa93b88663c85fb4628cc6c00bc15387d4f73f8883da7a9a7bcda
- MD5 2f81aefc355af3dd60273ec32b1c587f
- SHA1 ab16aef9bd6bc5e27456fb283f27e12a88455b53
- SHA512 4b9457e39aa0722b997e6627608225809a5c20dc9c3f96fc508e5758d28e5af2fa260f368947cd2f04ff4986179712820f369303c474a7f0b3a2f58be059f6dd
- SSDEEP 49152:GDkpzlg7bV4UxExTTo6TkUEmT5xxvRCI51ie:GDkpzl84UkTcpUjX1ie
- TLSH T1F1F56D13BEC08032EAB70670A87BBB50557A7E209F1365CF7BC47A2E1C716D1A972746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Dotfuscator
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory